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WASHINGTON 25, D. C. 




2 May 1945 



SUBJECT: Investigation of System Indicator Encipherment 



TO: Major Horton, Security Division 



1. The attached study shovs that a good deal of thought 
has been devoted to the problems involved in the disguise 

of system indicators, and presents a very good case of the 
difficulties that would be encountered. 

2. I regret that I have to say that I do not agree 
with the conclusions reached therein. I think that sooner 
or later we have got to do something along these lines of 
protecting our communications to the maximum degree con- 
sistent with operational practicabilities. Even a delaying 
effect would be useful. 

5. In view of the fact that there is a good probability 
that an extensive survey of the security of our communications 
will be undertaken by a special committee under the JCB, it 
is recommended that this study be held in abeyance until the 
survey referred to is actually undertaken or a decision not to 
have such a survey is made. We should know the answer to this 
within tWo or three weeks. 
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1. The attached investigation of the 
problem of system indicator encipherment is for- 
warded for your information. 



2. Concurrence is requested in the pro- 
posal to table this investigation for the follow- 
ing reasons: 



a. Our investigation has indicated 
that it will be impractical to employ enciphered 
call signs or a policy of frequent changes of 
radio frequencies on the War Department Command 
and Administrative Network . 



b. Very little, if any improvement, 
in security may be anticipated from enciphering 
indicators in tactical formations only. 

c. The attached report indicates no 
reason to encipher system indicators from a view- 
point of cryptographic security. 



FROM: 



3 . The general problem of system indica- 
tor encipherment will be kept on the docket for study 

as -a matter of interest but given no priority. 

NAME /€« ^.^QRGAN[ZAT10N building and room date 

RichardL. Downing, Major, Sig. Corps — - * 31 * - 
Communications Security Br. telephone 
261 
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INVESTIGATION OF SYSTEM INDICATOR ENCIPHERMENT 

I Soope: 

To investigate the following problems with respect to encipherment 
of system indicators* 

1» What are the requirements of a system for enciphering system 
indicators? 

2. How is system indicator encipherment to be accomplished? 

3* What ohanges in cryptographie systems are necessitated by system 
indicator encipherment? 

4* To what systems will system indicator encipherment be applied? 

5. Will system indicator encipherment apply to cryptographic sys- 
tems of all echelons? 

6. What is interrelation of U. S. Army system indicator encipher- 
ment with Joint and Combined systems? 

7* What is interrelation of U* 8* Amy system indicator encipher- 
ment with systems of other U. S. governmental agencies? 

II Discussion: 

Problem 1 * 

1« Whatever cryptographio system is used for enciphering system 
indicators must fulfill certain requirements that usually are not of prime 
interest in the general cryptographic system. These requirements must be 
considered in designing a system for enciphering system indicators* 

a. The system must be oapable of world-wide use. 

b. The system must be a Cryptographic System unrelated to any 
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c. The solution of keys for one day -will not compromise the 
keys of any other day, 

d* The system must resist solution in oases where many encipher- 
ments of the same plain text is available for analysis* 

e* The system must produoe a different enoipherment of the sys- 
tem indicator in each message* 

2* It is obvious that a single world-wide system must be employed* 
otherwise indicators for indioator systems would have to be set up, which 
is absurd, and could be extended ad infinitum* 

a* A world-wide system involves several problems in production 
and distribution but these are generally similar to those now arising in 
the production and distribution of other cryptographio systems . The amount 
of production, of course, depends on the type of system adopted. Dis- 
tribution will follow the channelp now operating. However, consideration 
must be given to oases of compromise of the system and the aotion to be 
taken when this happens. World-wide distribution does encounter delays* 
b* In the compromise of the usual cryptographio systems there 
must be allowed a day or two of delay merely to permit notification of all 
holders* For -Bie system with a few holders there isn't much danger of 
overlooking one or two and failing to notify them of the compromise and 
resulting changes. On a world-wide basis, though, a notice must be sent 
to all holders and it is quite possible that some will be overlooked or 
will reoelve the notice after a delay of several days. ISider these con- 
ditions there will be confusion at those headquarters on incoming messages 
and at stations receiving messages from these headquarters there will also 
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be confusion in identification of systems. Consequently, explicit in- 
structions must be devised to cover all situations involving delays. 

c. Distribution and use of the system must be coordinated on 
a world-wide basis. Consider the general oryptographic system: Should 

a headquarters fail to receive a key list on tine there is no great harm 
done since the previous key list may be re-used for a short time or else 
a stand-by system may be used.^ If this is done uneneiphered system in- 
dicators immediately make this faot known to recipients but may require 
services 'on messages received in the "undelivered” key list. On the other 
hand, without the current key list to enoipher system indicators there is 
no immediate solution to handle inooming and outgoing traffic. Incoming 
messages may be tried in a system known to be held by the originator but 
the classification will remain unknown. 

3. There is no oryptographic system held in common by all holders. 
Therefore, a system to enoipher indicators must be an extension of a 
present system to all holders or a new system issued to all holders. It 
is believed that no U. S. Army cryptographic system now in general use is 
suitable for enciphering system indicators. 

a. The Converter M-325 has been proposed as a means of accom- 
plishing enoipherment of system indicators. 

b. The Converter M-325 is available in quantities and it is be- 
lieved oould fill the needs insofar as distribution is concerned. The se- 
curity of the Converter M-325 does not appear to be adequate and this ques- 
tion is considered in paragraph 8. 

1 It is believed that inherent security in most YJar Department systems is 
sufficient to recognise that occasional re-use of a system is not harmful. 
Every effort is made to have systems in the hands of holders before the 
effective date. 
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4* As a practical matter there should be no linkage from day to day 
or, at least, if a solution is possible on whatever system is adopted the 
difficulty of solution each day should be the same* If unenciphered sys- 
tem indicators change only when key lists ohange, as at present, solution 
of the system indicator system will give the plain-text system indicator 
for other days prior and subsequent to the compromise* 

5* By the very nature of system indioator encipherment, depths 
will exist in greater numbers than have ever been considered to exist in 
a eryptographic system. 

a* It may be assumed that the enemy is familiar with ou2" ad- 
ministrative nets and there is no reason to believe that these nets will 
change at the time system indicator enoipherment becomes effective* There 
are a number of holders of only one or two eryptographic systems and these 
will have been established by observation of present practices* Tllhen sys- 
tem indicator encipherment is instituted it would be natural to assume that 
these holders will continue to use only one or two systems and must be 
applying enoipherment to the same system indicators from day to day. (Not 
necessarily the identical system indicators used prior to encipherment but 
changes contingent upon change of key lists • ) By collecting all such 
traffio, study can be direoted to these particular cases for intensive 
analysis* Solution of the indicators on these few messages will compromise 
the world-wide system. 

b* Errors of several forms are oertain to ocour in encipherment 
and should be overcome insofar as practicable* For example: Messages will 

be sent without enciphered system indicators, thus providing plain text, 
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if it can be recognised* Mistakes in encipherment will occur which might 
reveal information. Similar unenoiphered system indicators may provide 
a means of entry into the system. 

6. It is desirable to limit the amount of information which vari- 
ations in method of applying the enciphered system indicator may produce. 

a. Two alternatives are possible in the encipherment of system 
indicators with respect to time: 

(1) The system indicator of every message to be enciphered. 

(2) The system indicator to be enciphered only at stated 
intervals, i.e., every tenth message, once each day, 
once eaoh week, etc. 

b. In all but strips end double transposition the problem of 
Solution on U. S. Army oryptographio systems is essentially a daily one. 

That is, a solution on one day does not contribute to the solution of 
another day except for such information found in the traffic of the solved 
day which may be extended to contents of messages of preceding and follow- 
ing days. By enciphering the system indicator onoe each day little will 
be srained in protection of oryptographio security since the traffic for 
each day can still be sorted into homogeneous groups. Longer periods add 
nothing at all, being worse than merely a daily change. 

7. With encipherment of the system indicator for eaoh message some 
means must be provided to vary the enoipherment. This means can be found 

in either the message indicator or in the cipher text of the message. Either 
of these two sources may be considered to be without order and to provide 
an unpredictable key to encipher the indicator. In order to apply the 
procedure uniformly to all systems the message indicator would be better, 
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although one-time tapes do not at this tine contain alphabetical com- 
ponents * Difficult situations would arise in systens operated on-line in 
being able to obtain oipher text prior to identifying the system to the 
ad dr e88de # and for off-line operation of oertain systems the procedure should 
permit encipherment to be made prior to perforating a tape* Otherwise, 
splicing or other awkward arrangements would hare to be used* 

Problem 2 

8* Several methods have been considered as a means of accomplishing 
the enolpherment of system indicators* 

a* As mentioned in subparagraph 5b, the Converter 325 has been 

t 

considered as a means of enciphering system indicators* Preliminary se- 
curity tests on this device in connection with the problem revealed serious 
weaknesses that make the Converter M-326 undesirable for the purpose* The 
natural selection of a variable for eaeh message is the alignment of rotors* 
As indicated in paragraph 7 the external message indicator could be used 
for this purpose and would therefore indioate the alignment of the rotors* 

The external message indicator being sent in dear, initial alignment of 
fotors for each system indicator enciphered would be known* From this in- , 
formation, and with an assumption of identical plain text (see the dis- 
cussion in subparagraph 5a) it would be possible to reconstruct the rotor 
wirings, end-plate plugging, and reversing rotor* Reconstruction of these 
elements is sufficient for the day slnoe the alignments of eaeh system in- 
dicator are given in the message and all system indicators for that day can 
be found easily merely by deciphering the indicators* 

b* A second method proposed for the encipherment of system in- 
dicators is the system used at the present time by the U* S* Navy for en- 
ciphering oall signs* This is a tetragraphic frao donating system that 
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uses a 4th order matrix as an enciphering equation.* Such a Bystem would 
have to be changed to a pentagraphic type to accommodate 5-letter indicator 
groups • 

(1) As in any device whioh may be required for encipherment 
of system indicators, design and procurement would have 
to be instituted sometime prior to the date planned to 
place the encipherment of indicators into effeot. The 
system would require that each holder possess a 64-page 
document each month containing the matrices for encipher- 
ing and deciphering. 

(2) The method can be applied by pencil and paper alone but 
still requires the monthly keying information. However, 
with paper and penoil the job is rather slow and is 
subject to errors in addition and subtraction by using 
personnel. 

(3) The type of analysis that is used for solution with this 
system consists in solving a large number of simultaneous 
linear equations, about 34 as the minimum for a 4th 
order matrix. For this purpose it is necessary to find 
about 36 encipherments of texts which overlapped, as 
ABCD, ABCE, AFGE, etc., with equivalent plain text. If 
such overlapping encipherments cannot be found, it is 
necessary to have about 150 encipherments with equiv- 
alent plain text. Solution of these equations 

The principles of the method are well known, having been published in 
mathematical journals several years ago. 
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compromises the system for the day. With a different 
matrix used for each day the solution of encipherments 
for the next day is a new problem to be treated as in- 
dicated above. 

(4) Solution of equations of the above mentioned type, while 
not difficult, is laborious and time consuming. More- 
over, in the solving of these equations, the Navy has 
-beefr-found that only a few people (3 to 5) are able to 
work at one problem, and that additional personnel 
hinders rather than aids in the solution because more 
interfere with each other. Machines of the kind nec- 
essary to solve these equations are not in common use; 
but since they need only perform a large number of 
arithmetical processes, there is no reason to doubt that 
. such equipment oould not be constructed to perform the 

job daily. 1 

c. A literal one-time system with normal alphabets offers no 
security at all because the specific key will be known from the message 
indicator (see paragraph 7) thus determining’ the plain text. With an un- 
known alphabet relative values can be established which will be as ef- 
fective as the genuine indicator. Relative values may be linked from day 
to day by analysis of transmission data. 

d. Numerical additive systems will involve conversion from 
letters to numbers and from numbers to letters. Such a procedure is sub- 
ject to error during the conversion as is any additive process involved. 

The calculating machine recently constructed by International Business 
Machines for Harvard University may be capable of such work* 

mm- 
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©. From studios of various systems proposed for use as methods 
for enciphering system indicators there are indications that any method 
which makes use of a letter for letter substitution based upon a known key 
is subject to a great many objections from a security viewpoint. The best 
that may be expected from the system is a delay in solution. 

f. It appears that of the various systems considered, the only 
type which will provide the necessary security is either an additive system 
with one-time characteristics or a f raotionating system. A fractionating 
system which includes all the letters of the indicator and a key contained 
in the message seems to offer the greatest protection. A fractionating 
system, since it involves all letters of the indicator, will require so- 
lution to be based upon the indicator as a unit. To achieve a solution, 
much material will be necessary and although it is likely that this may be 
obtained, some delay in solution should be expected. A one-time system 
would require an enlarged production plant to produce the system. 

Problem 3 

9. The primary result to be expected of system indicator encipher- 
ment is increased security in all cryptographic systems. This may be 
desired because of inherent lack of security in the cryptographic systems 
employed. On the other hand, if the systems used <Ao provide a great deal 
of inherent security^or control is exercised over elements which may be 
weak in otherwise strong systems^, encipherment of system indicators may 
not be necessary. That is, the question may be asked, ”lf the traffic can 
not be solved what degree of security is gained by increasing the diffi- 
culty of solution?” 

For example: Message length, traffic volume. 



1 
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10. Enciphering system indicators must be integrated with other 
changes in cryptographic systems if it is to achieve its purpose. For 
example: Disregarding the system indicators altogether, other character- 
istics in the traffic will reveal some information about the various U.S2 
Army cryptographis systems. 

a. Teletype systems (except Converter M-294, of which more 
shortly) can be separated immediately from all other traffic. Converter 
M-228 and SIGTOT can be separated on the basis of differing forms in the 
message indicators. This type traffic is characterized by lack of group- 
ing in the cipher text. Other individual characteristics are present.* 

The traffic from Converter M-294 is spaced into groups when used off-line 
but may be differentiated from all other teletype traffic by the eight 
letter message indicator. Traffic from the Converter M-294 may be dif- 
ficult to distinguish from traffic from the Converter M-228 when the 
Converter M-294 is operated on-line. 

b* These three types of systems can be screened from the total 
mass of traffic without any difficulty. To break them down into separate 
systems will involve the techniques of traffic analysis and a more de- 
tailed analysis of the systems than indicated here. Without going into a 
detailed analysis of this problem it is sufficient to state that a good 
knowledge of the various nets and with a knowledge of the systems those 
nets are accustomed to use it is believed that a separation could be made 
with some success. 

o. Literal one-time pads. Converter M-134-C, Converter M-325, 
and strip systems have the same general characteristics. The screening 

^ The group count, for example, is a word count and is immediately apparent 
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will be more difficult 4 without ayaten indicators tut certain screenings 
can be made. Messages in one-time pads and Converter 1^134-0 can have a 
longer length than nes sagas in strips, or Converter U-325. Strip systems 
carry massage indieators without repeated letters*. The possibility ex- 
ists that strip systems may be identified by oharaoteristios of inverse 
frequency of letters. Again, knowledge of the oeeaaunleatian pattern and 
previous usage of systems in a net will aid considerably in sorting in- 
dividual systems. 

d. Double-transposition systems and the War Department Tele- 
graph Code can be separated immediately by their individual oharaoteristios* 

e. Any other systems whloh may be in use or will bo plaood in 
use in the future can be judged as to individual oharaoteristios by earn- 

, . ~ parison with existing systems • A more detailed analysis of the eharaoter- 

y f 

■f \ lstios of eaoh type of system would undoubtedly add other items of aasist- 

** / • . 

' anoe in classifying eaoh system. Such a study is not pertinent to this 

analysis. 

11. Another consideration for enciphering system indioat or s is the 
concealment of any information which may bo helpful to the eneaqr in traffic 



a. There is a correlation between classification and pre- 



analysis. 



oedenoe, and certain other oharaoteristios of the transmission. The clas- 
sification, if it oan be determined for eaoh message, permits analysis 
of flow of traffic to be made on the basis of olassifieatlon which may 
reveal information as to order of battle, troop movements, ote. 



This praotioe oan readily be changed and should be as soon as there is 
certainty that the enemy has learned of the change in message indioator w 
eipherment for strip systems. 
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b, There ie other information* hear ever* which can be gained 
from the heading without referenoe to the system indicator* Pile time and 
transmission time osn be used to gain information* The -volume of traffic* 

i 

its direotion of flaw* and preeedenee are other items which may be sub- 
jected to analysis to gain -valuable information* 

Problem * 

12* System indicator encipherment oould be applied to all types of 
systems namely* War Department system* Theater system* and taotioal systems 
used by oasibat troops* 

a* War Department systems require an indioat or to identify the 
specif ie system and in conjunction with this information to indicate the 
classification of the message* Theater systems for the most part also re- 
quire individual identification but systems in use by taotioal units can 
dispense with indicators to a large extent* Indicators are necessary in 
some oases* perhaps* to avoid confusion but it nay bo that a revision of 
the distribution in taotioal units ecu Id eliminate all need fpr system in- 



dicators* It should be noted* though* that the theory under which these 
systems are used is a distribution of traffic loads to protect the security 



of the system* (The need for this has been evident in use of the Converter 
11-209 and distribution of traffio loads still oould be improved* ) In many 



instances system indicators are not used and relation between the System 




indicator and other items oanmot be established*^ 

b* Evidence if slight of the Japanese using the system in- 
dicators in traffio analysis* There is evidence that other items are 
use of and also that only low echelon traffio is studied* Much is made of 

TB SIG 11-580-2 suggests that key list indicators (equivalent to sys- 
tem indicators) not be used unless there is confusion caused by leaving the 

indicator off the massage* 



-fiEBtCt- 
; MuffCI 



REF ID : A1 01100 

Information transmitted in dear. Sana evidence exists that gets of 
hi^ier eohelons are not monitored bat as yet this is inoonelusive.^ 

e. If system indioator encipherment were applied to Var De- 
partment systems and related Theater systems there are too plans which 
nay be considered. Che is to apply the encipherment to all systems. The 
other is to encipher the system indioators of only eortaln systems* 

(1) To answer 'the second point first* Regardless, of ary 
considerations of cryptographic security, if advantage 
could be taken of the system indioator in traffio ana- 
lysis it would seem desirable to encipher all system 
Indioators in order to avoid this condition* 

(2) The work involved in enciphering all system indicators 
is but little mere than for part of them. Production 
would be about the same as would distribution* 

(8) Easily identifiable systems (WDTC) may be a weakness If 
the system indioator is enciphered* Provision would have 
to be made to change this indioator frequently. 

(4) Messages to and from Military Attaches are easily 

Identifiable and while traffio information available from 
these sources may bo slight, encipherment of the system 
indioators may became points for analysis of the system 
indioator encipherment system* 




* A Retailed study is planned to investigate thoroughly the amount of in- 
formation gained by the Japanese through traffio analysis* "A" Branch has 
been making studies on correlation of information received from Japanese 
souroes and other available information relating to traffio analysis* 
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13* If encipherment is applied to all echelons, coordination will 
have to he effected by Theaters within the Theater for production of sys- 
tems to enoipher system indicators. In this connection one point anst 
not be overlooked. It is known from a study of 301 's that % anltiplioity 
of systems exist throughout the various theaters. (Many 801 's from SWPA 
and PGA. have not been received for examination so that a knowledge of sys- 
tems in low echelons is scanty.) While many of these do not use a system 
indicator any which do make use of a system indicator must be suitable 
for enoiphement or provision made to change it so that it oan came within 
the limits necessary. 

14. Unless a system is devised whioh requires very little production 
and compilation in the preparation of a key list, planning would have to 
include considerations for production of these keys for theaters by the 
Signal Security Agency. 

Problem 6 

16. It is possible that encipherment of system indicators would not 

• 

be immediately acceptable to the TJ. 8. Havy for -use in the Havy. In any 
event consideration should be given to handling of Joint systems. These 
systems will immediately beoome evident the instant they are plaesd on an 
dray oirouit which handles Any traffic with enciphered system indicators • 
Many of the same situations will exist in combined systems. 

Problem 7 

16. A somewhat similar situation to that of Problem 6 arises in the 
ease of other U. 8. governmental agencies for which the U. 8. Amy aots as 
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adviser on matters concerning codes and siphon* In sobs omoo the ingr 
produo so the ijitoo uood by those agencies* It is dooirahlo to asks all 
systenm vhioh pass over Any si retd to res cable Any traffic* In many oaaoo 
(063, for example) those agonoioo hare pOoullaritios In their traffie which 



would establish it as distinct orsn though the system indicators wore en- 
ciphered. These differences should be ad^utted before a ay final steps are 
taken* 

III Conclusions • 

17* Before the encipherment of system indicators oan be accomplished 
praotloally a number of minor problems will hare to be worked out, as in- 
dicated in the Discussion* Many of those are unrelated to each other and 
entail relatirely little change from the aeourity -viewpoint. Many will 
be serious from a practical operational rieapoint* For instance, the 
length of 8IGABA messages was changed from a limit of 100 groups to 550 
^ groups* This was done primarily to expedite handling of long mesaages* 
Rhinos security of 8XGABA is not known to suffer under this usage a great 
ad-vantage has resulted in practical application of the 8I0ABA* 

/yj 18. There is no poeltire eri dance that 0* 8* Army systems shore 
ill taotioal level are being readyby the enauy* There is considerable neg- 



ative evidence which tends to show that the eneay is not reading any of 
the "high-grade" systems generally used above the level ef Division or 
comparable units* It is known that taotioal systems such as the Converter 
M-209 and small operations oodes used within Division have been roady by 
the enemy* There is seme indication that a few scattered strip systems 
may have been read. From the viewpoint of cryptographic aeourity the need 
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for enciphering system indicators to provids protection for other than 
taotieal systems does not exist. 

19. From 'various sources it is known that several factors contribute 
to solution of taotioal systems by tbs enescy. Use of system iadioators 
does not have a direct hearing an tbs solution because many of the systems 
use no system indicators, inexperienced operators and cods ol erics arc in- 
dicated to be the greatest single source of errors which load to orypt- 

e 

analytic compromise in these systems • 

20. It appears likely that no system can be developed which mill 
meet all requirements for a system indicator enciphering system. The 
best that may be attained ie a delay. For security of a eryptographie 
system merely delaying is not sufficient unless it is for an appreciable 

. period of time. There seems to be no point in proposing to use a system 
‘ which serves only to delay. It is difficult to establish the "time of 
delay” and it may be more apparent than real. The need for causing un- 
necessary confusion and work does net appear to be justified by the re- 
sults to be expected in only a delay. 

21. There mill be considerable confusion resulting in a change of 
the magnitude oeoasioned by sneiphermsnt of ays tern indicators • Careful 
thought and planning mill be absolutely necessary in preparing to place 
■uoh a scheme into effect, so as to avoid throwing Chaos into a eonammi- 

cations system that is now taxed, at times, to move traffic. Small 

« • 

changes in procedure designed to further the project should be studied 
with care before being put into effeot, otherwise, subsequent changes 
based upon later information may males the first unnecessary or required 
still further modifications in It, 
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22. Three other phases of aa ofir ell communication security plea 
which ere related to the present problem east be kept in mindi 
e. Protective Security. 

b. Conventional encipherment of cell sigps. 

\ 

o. Concealment of ell information including the total amount of 
traffic by means of oiphony, oifax, or similar schemes. 
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